404 Not found MS11-066: Vulnerability in Microsoft Chart Control Could Allow Information Disclosure

Hi

This fixlet is broken MS11-066: Vulnerability in Microsoft Chart Control Could Allow Information Disclosure. I get a 404 error. And when I try to manual get the patch from the link in the action script I get a 404. http://download.microsoft.com/download/7/C/7/7C7C0931-1416-4C72-AB4E-47A083EA0C43/MSChart_KB2500170.exe

It seems like its down or has been moved.

Can the patching team figure out an alternative way to install it or fix the fixlet?

Best regards
Bjarni Guðmundsson

The same thing is happening with these patches-

*** MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution - Office 2013 (KB2817623)**

*** MS15-022: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution - Office 2013 Gold - KB2956151**

Looks like those updates just may not be available from MS anymore. They don’t seem to be available from any of the bulletin links or from the MS catalog.

It may have something to do with this announcement: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/sha-1-windows-content-to-be-retired-august-3-2020/ba-p/1544373

Ok thats sounds fair.

Is your team going to change these fixlets, disable this as default action and maybe direct to this site, instead of having problems downloading them and often corrupting baselines.

Best regards
Bjarni Guðmundsson

The appropriate team is aware and is looking into it this further. They will make any appropriate changes once they conclude their investigation.

2 Likes